Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b306bb69-5548-3022-b229-79ea8647eb95.roa
File:                     b306bb69-5548-3022-b229-79ea8647eb95.roa (raw, json)
Hash identifier:          mDjVRulN52bIbW8jDPWmRdWoz9GqUjTddDLmOWX4K3s=
Subject key identifier:   EA:38:F9:CD:F5:FD:55:0A:AC:8A:0E:35:0B:8C:2E:53:E8:6B:BB:6B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E0D843A92E4440C0C2BED2100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b306bb69-5548-3022-b229-79ea8647eb95.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     30860
IP address blocks:        2001:470:542::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:3a:92:e4:44:0c:0c:2b:ed:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=3d6b611a-a8c0-4306-9aba-8bce8d36719a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:72:14:80:86:c4:d9:30:e7:76:4d:5b:a5:42:
                    b7:07:37:58:11:b5:2c:6e:e5:94:40:e1:62:18:46:
                    0a:8e:c1:2d:74:3c:10:b3:19:5b:15:77:22:30:63:
                    f6:38:84:61:97:d4:28:25:ac:27:3f:f2:7b:57:0c:
                    69:d1:56:53:1e:fb:bf:51:03:96:cb:bc:b9:50:d6:
                    4a:f4:30:00:64:cb:17:9b:ab:5d:a4:46:b6:fa:49:
                    e6:2d:9c:27:1d:2b:e0:d6:c5:eb:de:82:90:3b:75:
                    3f:3b:b6:80:fb:f6:50:62:41:80:3f:ad:b0:13:24:
                    91:73:4b:d5:68:c2:a0:fe:0b:11:90:2e:29:bf:1f:
                    0b:f1:6b:ea:da:b4:d9:4e:0d:f4:10:e5:92:26:a6:
                    ac:9c:9f:d5:b2:53:a2:7b:61:90:61:ba:4f:de:45:
                    7c:86:60:be:fe:7f:19:20:70:17:ac:b2:e2:d7:f3:
                    04:29:58:07:f5:88:e0:6d:b6:0d:72:ea:df:d5:4d:
                    7b:c8:3d:c8:5c:00:f3:cd:ad:65:50:b2:ab:43:04:
                    c3:02:ac:f5:9f:45:24:dd:ca:99:4a:f4:33:16:8e:
                    53:6b:13:1d:d0:55:59:25:c4:18:0a:61:7c:96:96:
                    cd:25:27:96:44:69:b8:7d:48:8a:6f:d3:60:d4:f6:
                    36:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:38:F9:CD:F5:FD:55:0A:AC:8A:0E:35:0B:8C:2E:53:E8:6B:BB:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b306bb69-5548-3022-b229-79ea8647eb95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:542::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:88:74:32:fe:90:56:73:a4:65:dd:8d:ad:a2:99:aa:90:de:
         1b:4d:d6:31:bc:21:94:b7:b0:4f:3f:44:30:42:0b:0d:b8:9f:
         8d:4a:08:04:f3:ed:ec:2c:00:84:a5:fc:67:fa:2a:17:6e:8a:
         89:64:b6:a2:73:3b:43:ea:3d:36:0c:12:7b:4b:7e:8b:3e:0d:
         7c:55:9e:5f:b1:f9:b3:07:b7:aa:3c:fc:3f:9b:ff:95:c0:8a:
         f1:39:28:ed:63:ec:ff:3a:b2:b5:07:d7:7e:f1:a5:4b:9a:5a:
         eb:0c:76:87:b3:60:68:38:8a:46:8d:fb:92:b9:25:dd:a5:71:
         2b:f0:23:bc:f9:78:31:c0:f5:11:c9:09:b1:bc:69:24:e9:c7:
         45:c7:78:24:3d:bd:12:04:f4:20:0d:de:52:e4:0d:f6:08:7f:
         4c:9e:5f:3d:24:0d:61:6f:40:4c:db:39:5e:51:bc:55:a4:a5:
         57:e5:e6:ec:fd:24:1b:4b:87:50:2d:76:96:c3:61:0f:47:bc:
         10:96:ae:02:72:60:9b:34:a5:aa:d7:cf:8b:e5:c0:74:43:e0:
         83:80:c0:ca:db:79:de:9b:0d:ef:07:b4:02:70:97:52:a2:8f:
         48:84:70:aa:c2:42:53:58:97:bf:68:11:d6:37:48:8a:4c:a2:
         76:1f:e4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 16:37:27 2026 by rpki-client